CVE-2023-36326
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
An Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling the realloc function in the bn_grow function.
Risk Assessment
The organization may be exposed to the execution of malicious code, leading to potential data loss and compromise of system integrity. Additionally, the possibility of privilege escalation poses a risk of unauthorized access to resources.
Recommendation
It is recommended to update the RELIC component to a version that includes the fix after commit 34580d840469361ba9b5f001361cad659687b9ab. A security audit of the system should also be conducted to identify potential threats.
Original NVD description (English source)
Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bn_grow function.